$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9/70896c35-ab87-317c-859a-f346e8a1f3b9.roa File: 70896c35-ab87-317c-859a-f346e8a1f3b9.roa (raw, json) Hash identifier: fkQSHm5wYYVil3P9NErE7iThsECI/3kvE4nQoSky6Oo= Subject key identifier: 4C:02:A7:84:FE:61:C6:28:D8:14:D0:51:28:AF:44:38:DD:75:6C:FB Certificate issuer: /CN=5dbcd19a-2b5c-428a-819d-73d9a69760f9 Certificate serial: 010D0C9F4328584F8DD88D04809941A6648BBF80 Authority key identifier: 61:C8:6F:D9:9D:BE:41:61:E1:7E:28:58:5C:D9:42:B2:20:81:9C:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9/70896c35-ab87-317c-859a-f346e8a1f3b9.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 979 IP address blocks: 23.144.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9/5dbcd19a-2b5c-428a-819d-73d9a69760f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9/5dbcd19a-2b5c-428a-819d-73d9a69760f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:8d:04:80:99:41:a6:64:8b:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dbcd19a-2b5c-428a-819d-73d9a69760f9 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=52f8e15e-ac5a-4f40-afaa-63be7eb5abf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:28:5c:f7:13:2f:c1:f2:ec:3d:38:dc:66:7e: 52:03:69:b2:7e:8c:39:28:98:50:57:d5:ff:49:96: 98:2a:2f:c6:27:d0:38:61:55:5e:42:0b:8a:69:7e: c5:f9:56:95:25:5e:da:f8:50:84:ef:06:51:7c:0e: 4c:5a:d7:36:a8:3d:3e:55:93:ec:8a:7e:5a:5e:17: c6:a4:23:2c:24:64:0d:50:a4:65:2e:6c:fe:17:4e: 2e:f9:c6:57:3b:06:f2:bf:96:b6:54:af:73:a9:37: a8:1f:5b:28:f0:27:d1:e6:a3:66:bc:1c:b2:24:86: 89:33:5f:34:f8:44:73:a1:36:59:68:86:c5:84:49: 6f:9b:70:58:a6:13:c1:95:26:15:5f:7d:f0:d5:1c: e4:c4:83:f4:af:21:14:40:72:6f:d2:a1:de:55:06: 4b:8c:d3:6d:64:da:c0:72:99:f7:47:fd:d7:3f:27: 2e:64:c2:98:b0:fb:5d:50:32:89:db:a5:f4:14:86: aa:eb:b1:4d:df:49:f9:83:c8:99:94:46:4b:54:c2: 68:ba:b7:b8:eb:84:85:0a:2d:94:56:36:16:9a:c8: a0:6d:84:88:e5:29:cd:c9:c5:73:4d:81:23:38:55: 63:69:70:3a:fb:27:a4:82:06:bd:d4:27:8f:eb:8d: 69:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:02:A7:84:FE:61:C6:28:D8:14:D0:51:28:AF:44:38:DD:75:6C:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9/70896c35-ab87-317c-859a-f346e8a1f3b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9/5dbcd19a-2b5c-428a-819d-73d9a69760f9.crl X509v3 Authority Key Identifier: keyid:61:C8:6F:D9:9D:BE:41:61:E1:7E:28:58:5C:D9:42:B2:20:81:9C:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9.cer sbgp-ipAddrBlock: critical IPv4: 23.144.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:4a:64:7c:fa:04:8a:85:7b:72:23:56:9f:85:5f:4d:77:a3: 6e:85:67:98:d9:ed:88:fd:00:0a:82:ca:e3:eb:ab:c0:86:1f: 9f:a5:c7:73:a0:a2:2f:72:54:f8:da:d7:4c:5c:dc:ee:87:30: ec:08:b1:0b:01:8d:cb:bd:64:22:dd:59:54:75:ef:91:96:9e: db:fc:f2:28:e2:5d:65:0e:ac:c6:95:3e:16:a5:95:d4:04:5b: ec:18:d2:95:b7:88:6a:6f:68:a7:19:43:e9:06:52:57:ab:95: 1b:ff:3d:6e:f7:b8:a4:4e:06:86:93:7d:07:f9:f7:6c:f2:2d: 39:80:9f:67:b3:e9:4b:f1:80:78:5a:2f:43:96:fc:64:f1:dd: 9f:c9:5d:dd:63:64:13:fc:03:43:f9:8b:cd:48:05:58:aa:79: 72:cd:2f:9a:8a:66:aa:74:a0:84:e5:bd:91:29:96:03:74:ce: e7:c8:7b:4f:fb:82:be:6f:7b:d8:11:03:a1:4a:b2:35:55:67: ac:b3:39:3e:63:8c:6e:9a:f3:30:87:b9:20:bb:ba:c8:1b:d5: 8c:35:69:6a:81:e9:04:dc:6e:a8:2b:b2:f9:c0:66:d3:e9:4a: ab:93:e9:54:85:db:47:1d:0b:3c:c7:20:37:b0:75:c8:20:d0: 55:d0:98:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2I0EgJlBpmSLv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRiY2QxOWEtMmI1Yy00MjhhLTgxOWQtNzNkOWE2OTc2 MGY5MB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk NTJmOGUxNWUtYWM1YS00ZjQwLWFmYWEtNjNiZTdlYjVhYmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhChc9xMvwfLsPTjcZn5SA2myfow5KJhQV9X/ SZaYKi/GJ9A4YVVeQguKaX7F+VaVJV7a+FCE7wZRfA5MWtc2qD0+VZPsin5aXhfG pCMsJGQNUKRlLmz+F04u+cZXOwbyv5a2VK9zqTeoH1so8CfR5qNmvByyJIaJM180 +ERzoTZZaIbFhElvm3BYphPBlSYVX33w1RzkxIP0ryEUQHJv0qHeVQZLjNNtZNrA cpn3R/3XPycuZMKYsPtdUDKJ26X0FIaq67FN30n5g8iZlEZLVMJoure464SFCi2U VjYWmsigbYSI5SnNycVzTYEjOFVjaXA6+yekgga91CeP641prQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwCp4T+YcYo2BTQUSivRDjddWz7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81ZGJj ZDE5YS0yYjVjLTQyOGEtODE5ZC03M2Q5YTY5NzYwZjkvNzA4OTZjMzUtYWI4Ny0z MTdjLTg1OWEtZjM0NmU4YTFmM2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNWRiY2QxOWEtMmI1Yy00MjhhLTgx OWQtNzNkOWE2OTc2MGY5LzVkYmNkMTlhLTJiNWMtNDI4YS04MTlkLTczZDlhNjk3 NjBmOS5jcmwwHwYDVR0jBBgwFoAUYchv2Z2+QWHhfihYXNlCsiCBnDYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81ZGJjZDE5YS0yYjVjLTQyOGEtODE5ZC03M2Q5 YTY5NzYwZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5B0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFKZHz6BIqFe3IjVp+FX013o26FZ5jZ7Yj9AAqCyuPrq8CGH5+lx3Og oi9yVPja10xc3O6HMOwIsQsBjcu9ZCLdWVR175GWntv88ijiXWUOrMaVPhalldQE W+wY0pW3iGpvaKcZQ+kGUlerlRv/PW73uKROBoaTfQf592zyLTmAn2ez6UvxgHha L0OW/GTx3Z/JXd1jZBP8A0P5i81IBViqeXLNL5qKZqp0oITlvZEplgN0zufIe0/7 gr5ve9gRA6FKsjVVZ6yzOT5jjG6a8zCHuSC7usgb1Yw1aWqB6QTcbqgrsvnAZtPp SquT6VSF20cdCzzHIDewdcgg0FXQmCg= -----END CERTIFICATE-----Generated at Wed Nov 4 20:29:20 2026 by rpki-client